Security
"Industry has gotten good at identifying vulnerabilities in the supply chain; SBOMs and so on [but not at] at insidious backdoors and logic issues that are built into software, and update mechanisms that could cause implants..."
"Loaded by default on just about every version of Windows, so it provides a broad attack surface"
You filthy animals are **** at network architecture, and it may be "necessary to expand threat hunting" says NCSC.
"Once an attacker is past the initial access, the opportunities are ample for lateral movement and privilege escalation within a cluster..."
"We operate with the assumption that a sophisticated nation state threat actor is always active inside the organisation"
Courier dispatched with a USB stick carrying trade settlement details after systems disrupted...
Incident follows record HTTP2 "Rapid Reset" attack warnings as well as CISA note on exploitation of Service Location Protocol vulnerability for DDoS purposes.
TTPs and telemetry suggest a real focus on zero days and appliances by Chinese APTs.
Biggest overhaul of Redmond's security in 20 years sees promises of "code analysis [of] 100% of commercial product”, cryptographic keys to be kept in a hardened Azure HSM, more.